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Top Stories 

• Cleanup is expected to last 3 weeks as crews worked to clear the area where 42,000 pounds 
of hazardous chemicals spilled from a semi-truck along U.S. Highway 40 on Rabbit Ears 
Pass in Steamboat Springs, Colorado, March 13. - Steamboat Pilot & Today (See item 2 ) 

• Kraft Foods Group announced March 17 a voluntary recall of about 242,000 cases of its 
Macaroni & Cheese Dinner product that were distributed throughout several countries due 
to the possibility that some boxes may contain metal fragments. - Washington Post (See 
item 14 ) 

• Premera Blue Cross reported March 17 that hackers may have gained access to financial 
and personal information for 1 1 million customers following a cyber-attack that began in 
May 2014. - Reuters (See item 19 ) 

• Firefighters reached 70 percent containment March 17 of a fire that burned 22,300 acres in 
Woodward County, Oklahoma, and damaged or destroyed 25 structures causing an 
estimated $1.1 million in damage. - Enid News & Eagle (See item 20 ) 
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Energy Sector 



Nothing to report 
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Chemical Industry Sector 

1. March 18, Associated Press - (West Virginia) Ex-worker pleads guilty in West 
Virginia chemical spill case. A former plant manager at Freedom Industries pleaded 
guilty March 18 to negligent discharge of a pollutant in connection to a January 2014 
chemical spill at the company’s Charleston facility that contaminated the water supply 
of 300,000 West Virginia residents. 

Source: http://www.sfgate.com/news/science/article/2-people-to-make-pleas-in-West- 
Virginia-chemical-6141728.php 

2. March 17, Steamboat Pilot & Today - (Colorado) Chemical spill cleanup continues 
on Rabbit Ears Pass. Crews worked March 17 to excavate the area where 42,000 
pounds of hazardous chemicals spilled from an overturned semi-truck along U.S. 
Highway 40 on Rabbit Ears Pass in Steamboat Springs March 13, while standing water 
was being pumped into a large tank and contaminated dirt was being removed from the 
scene. Officials continue to assess the environmental impact and cleanup efforts are 
expected to last about 3 weeks. 

Source: http://www.steamboattodav.com/news/2015/mar/17/chemical-spill-clean- 
continues-rabbit-ears-pass/ 

T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

3. March 17, TheBayNet.com - (Maryland) Nuke plant resumes full operations. The 
Calvert Cliffs Nuclear Power Plant in Lusby, Maryland, was brought back online 
March 15 following the completion of the facility’s annual refueling outage which 
began February 16. Technicians replaced nearly one-third of the reactor’s fuel and 
performed thousands of inspections and preventative maintenance activities while the 
facility was offline. 

Source: http://www.thebavnet.com/articles/0315/nukeplantresumesfulloperations.html 

4. March 17, Wicked Local Carver - (Massachusetts) Pilgrim Station: Nuclear plant 
gets failing marks. The U.S. Nuclear Regulatory Commission’s end-of-cycle 
performance assessment of the Pilgrim Nuclear Power Plant in Plymouth identified 
deficiencies in the implementation of corrective action plans for unplanned scrams that 
were not completed as intended or were closed prematurely, among other findings. The 
review resulted in the plant being issued 2 new white inspection findings to replace 2 
existing white performance indicators, and the plant will continue to receive heightened 
attention until further notice. 

Source: 
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http://carver.wickedlocal.com/article/20150317/NEWS/150319197/12581/NEWS 



5. March 17, Lower Hudson Valley Journal News - (New York) Indian Point violation: 
Reactor operator has sleep apnea. The U.S. Nuclear Regulatory Commission (NRC) 
issued an enforcement decision against Entergy March 16 for its failure to notify the 
agency that an operator of the Indian Point Unit 3 nuclear reactor in New York had a 
disability that would have resulted in NRC issuing the operator a restricted license 
instead of a renewed license in 2012. 

Source: http://www.lohud.com/storv/news/local/2015/03/17/sleep-apnea/24896477/ 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. March 17, KMGH 7 Denver - (Colorado) Thief dubbed ‘Longhorn Bandit’ robs 
Westerra Credit Union in Arvada, police say. Authorities are searching for a suspect 
dubbed the “Longhorn Bandit”, who allegedly robbed a Westerra Credit Union branch 
in Arvada March 17 and is believed to be linked to 5 other bank robberies in the area. 
Source: http://www.thedenverchannel.com/news/local-news/man-robs-westerra-credit- 
union-in-arvada-police-say-suspect-fled-scene-in-black-4-door-sedan03172015 

For additional stories, see items 19 and 29 
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Transportation Systems Sector 

7. March 18, South Florida Sun-Sentinel - (Florida) Four dead, two hurt after trailer 
detaches on U.S. 27 in Palm Beach County. All lanes of a stretch of U.S. Highway 27 
near South Bay in Palm Beach County reopened after more than 8 hours March 17 
following a chain-reaction crash that was caused by a detached semi-truck trailer 
resting on the highway and foggy driving conditions. Four individuals were killed and 
2 others were injured in the crash that remains under investigation by the Florida 
Highway Patrol. 

Source: http://www.sun-sentinel.com/local/palm-beach/fl-south-bav-four-fatal-crash- 
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20150317-story.html 



8. March 17, WABC 7 New York City - (New York) Inspection finds several defects 
with crude oil tank cars, rails through New York. The office of the governor of New 
York announced March 17 that an inspection of crude oil tank cars and rails through 
New York uncovered 93 defects that could result in unstable tracks, including 7 critical 
safety problems that needed immediate fix. 

Source: http://7online.com/news/inspection-finds-several-defects-with-crude-oil-tank- 
cars-rails-through-new-york/561887/ 

9. March 17, WPIX 11 New York City - (New York) Plane makes emergency landing at 
JFK Airport after birdstrike. An American Airlines flight headed to St. Thomas, 

U.S. Virgin Islands, made an emergency landing at John F. Kennedy International 
Airport in New York City after it struck a flock of geese shortly after take-off March 
17. The flight’s 126 passengers and seven crew members were deplaned and 
rescheduled to depart on a different plane later that day. 

Source: http://pixll.com/2015/03/17/bird-strike-forces-planes-emergencv-landing-at- 
jfk- airport/ 

10. March 17, Post-Tribune of Northwest Indiana - (Indiana) 2 dead in head-on crash 
with Hebron school bus. Indiana 8 west of Baums Bridge Road in Pleasant Township, 
was closed for a few hours March 17 after a school bus from the Metropolitan School 
District of Boone Township and a pickup truck collided head-on, killing 2 individuals 
and injuring 2 students and the school bus driver. 

Source: http://www.chicagotribune.com/suburbs/post-tribune/news/ct-ptb-porter-fatal- 
st-0318-20150317-story.html 



11. March 17, San Francisco Bay Area News - (California) Oakland: Caldecott Tunnel 
reopened after morning car fire. An eastbound bore of the Caldecott Tunnel was 
closed for almost 4 hours March 16 following 2 crashes on Highway 24, including 1 
that engulfed a car in flames and prompted officials to evacuate at least 60 motorists 
from the tunnel. An engineer inspected the tunnel for damage before it was deemed 
safe and cleared to reopen. 

Source: http://www.mercurvnews.com/my-town/ci 27720746/oakland-car-fire-inside- 
caldecott-tunnel-creates-traffic 



For another story, see item 20 
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Food and Agriculture Sector 

12. March 18, Nebraska. tv - (Nebraska) Fire heavily damages Clarks plant. The 
American Wood Fibers (AWF) facility in Clarks, Nebraska, sustained major damage 
from a fire March 16 that prompted the evacuation of employees. The cause of the 
blaze remains under investigation, and operations were shifted to other AWF facilities. 
Source: http://www.nebraska.tv/story/28546588/fire-heavilv-damages-clarks-plant 
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13. March 18, Stevens Point Journal - (Wisconsin) Del Monte fire: Smoky, but little 
damage. Employees were safely evacuated from the Silgan Containers plant at the Del 
Monte Foods facility in Plover for several hours March 17 after a fire ignited in a piece 
of equipment that bums off vapor from a spray booth. The cause of the fire remains 
under investigation, while authorities reported no injuries or significant structural 
damage. 

Source: http://www.stevenspointioumal.com/storv/news/local/2015/03/17/fire-buming- 
plover-del-monte-plant/24925857/ 

14. March 17, Washington Post - (International) Kraft recalls more than 6 million boxes 
of macaroni and cheese because they may contain metal. Kraft Foods Group 
announced March 17 a voluntary recall of about 242,000 cases containing 6.5 million 
boxes of its Macaroni & Cheese Dinner product that were distributed throughout the 
U.S., Puerto Rico, the Caribbean, and some South American countries due to the 
possibility that some boxes may contain metal fragments. The company warned 
consumers not to prepare and eat macaroni that comes in the original flavor, 7.25-ounce 
packages of the product. 

Source: http://www.washingtonpost.com/news/to-vour-health/wp/2015/Q3/17/kraft- 
recalls-242000-cases-of-macaroni-and-cheese-because-they-may-contain-metal/ 

15. March 17, U.S. Department of Agriculture - (Missouri) Recall notification report 
047-2015 (Buffalo Jerky). The Food Safety and Inspection Service announced March 
17 that Alewel’s Country Meats recalled about 134 pounds of its Buffalo Jerky beef 
products due to misbranding and use of the wrong inspection legend. The affected 
products were shipped to retailers in Missouri. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/20 1 5/mr-047-20 1 5 



16. March 17, U.S. Food and Drug Administration - (National) Trader Joe’s recalls Raw 
Walnuts because of possible health risk. The U.S. Food and Drug Administration 
reported March 17 that Trader Joe’s Company issued a recall for its Raw Walnuts 
products due to possible Salmonella contamination. The recalled products were 
packaged in clear plastic bags and distributed to Trader Joe’s stores nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm438472.htm 
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Water and Wastewater Systems Sector 

17. March 17, Hickory Daily Record - (North Carolina) Grease and debris cause 
wastewater overflow in Hickory. Buildup of grease and other debris in a sanitary 
sewer line in Hickory, North Carolina, caused an overflow of 3,300 gallons of 
wastewater into Cripple Creek in the Catawba River basin March 15. Crews contained 
the spill using a combination jet/vacuum sewer truck, and officials reported that a 
visual inspection revealed no apparent impacts to the potable water system. 

Source: http://www.hickorvrecord.com/news/grease-and-debris-cause-wastewater- 
overflow-in-hickory/article 8571139a-ccl7-lle4-8060-a31457cbd229.html 
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18. March 17, WHAG 25 Hagerstown - (West Virginia) Shepherdstown under water 
advisory. The Shepherdstown Water Department in West Virginia issued a boil 
advisory March 17 after officials indicated that there was a high level of contamination 
within city’s limits following a water main break at the East Campus of Shepherdstown 
University. The break was repaired and the advisory was expected to stay in effect until 
March 18. 

Source: http://www.vour4state.com/storv/d/story/shepherdstown-under-water- 
advisory/25360/ 5chNQmGqUyftiRfmFpiKQ 
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Healthcare and Public Health Sector 

19. March 17, Reuters - (National) Premera Blue Cross says data breach exposed 
medical data. Premera Blue Cross reported March 17 that hackers may have gained 
access to banking account numbers, Social Security numbers, and personal information 
for 1 1 million customers following a cyber-attack that began in May 2014. The health 
insurer is investigating and stated that this attack is unrelated to a previous Blue Cross 
Blue Shield breach in January. 

Source: http://www.nytimes.com/2015/03/18/business/premera-blue-cross-says-data- 
breach-exposed-medical-data.html 

For another story, see item 29 
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Government Facilities Sector 

20. March 17, Enid News & Eagle - (Oklahoma) Wildfire damages $1.1 in Woodward 
area. Firefighters reached 70 percent containment March 17 of a fire that burned 
22,300 acres in Woodward County, Oklahoma, and damaged or destroyed 25 structures 
causing an estimated $1.1 million in damage. Several people were evacuated March 16 
and a stretch of Oklahoma 50 between Mooreland and Freedom was closed for several 
hours. 

Source: http://www.enidnews.com/news/update-wildfire-damages-in- woodward- 
area/article a8ade7da-ccac-l Ie4-9cf0-871eee820f92.html 

21. March 17, KPRC 2 Houston - (Texas) School bus with students on board involved 
in accident on Eastex Freeway. Nineteen students were transported to area hospitals 
after their Cleveland Independent School District bus slammed into the back of a semi- 
truck on the Eastex Freeway at Will Clayton Parkway in Houston March 16. 

Source: http://www.click2houston.com/news/school-bus-with-students-on-board- 
involved-in-accident-on-eastex-freeway/3 1 848586 

22. March 17, CNN - (Washington, D.C.) White House is mailed package with cyanide. 
The U.S. Secret Service confirmed March 17 that the White House in Washington, 
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D.C. received an envelope March 16 at its mail screening facility which initially tested 
negative for any threatening substances, but tested positive for cyanide in a follow-up 
chemical test. The sample was sent to another facility to confirm the positive test 
results and no injuries or exposure concerns were reported. 

Source: http://www.cnn.com/2015/03/17/politics/white-house-mailed-cyanide/ 

23. March 17, Newark Star -Ledger - (New Jersey) 8 middle school students sent to 
hospital after Bridgewater bus crash, police say. A Bridgewater-Raritan Middle 
School bus lost power and crashed into a tree while entering the New Jersey school 
March 17, causing eight students to be transported to a local hospital with injuries. The 
remaining students were checked by emergency personnel on-site and officials believe 
the loss of power was due to a mechanical failure on the bus. 

Source: 

http://www.ni.eom/somerset/index.ssf/2015/03/8 students sent to hospital after brid 
ge water bus.html 

24. March 17, NBC News - (National) State Department unclassified network back up 
after four days. The U.S. Department of State announced March 17 that Internet 
service on its unclassified email network was restored after it was shut down March 13 
follow the discovery of malware in the system in November. The department reported 
that some email delivery could be delayed while the system resumes normal operations. 
Source: http://www.nbcnews.com/news/us-news/state-department-unclassified- 
network-back-after-four-days-x-n325221 
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Emergency Services Sector 

25. March 17, KAMR 4 Amarillo - (Texas) Health officials testing for possible TB 
exposure at Randall County Detention Center. Public health officials in the City of 
Amarillo are testing both inmates and staff members at Randall County Jail for 
tuberculosis after a patient showed symptoms of the disease. Officials believe the 
likelihood of spreading the disease is low. 

Source: http://www.mvhighplains.corn/storv/d/storv/health-officials-testing-for- 
possible-tb-exposure/33486/wVXEfFyGkkiKeD35fi pvw 

26. March 17, Omaha World-Herald - (Iowa) Iowa auditor: Over $100,000 in 
‘unsupported and improper disbursements’ connected to Woodbine fire 
department. The Iowa State Auditor released a report March 17 alleging that $106,269 
was spent by members of the Woodbine Volunteer Fire Department from January 2009 
through March 2014 on improper and unsupported expenditures including fuel for 
personal vehicles, alcohol purchases, and undocumented expenses. Three fire 
department members were charged with unauthorized use of a credit card and the 
department is working on improving its record keeping and accountability. 

Source: http://www.omaha.com/news/iowa/iowa-auditor-over-in-unsupported-and- 
improper-disbursements-connected-to/article 7aaa2ea3-3eef-533d-9e4f- 
d93b048b33bb.html 
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Information Technology Sector 

27. March 18, Securityweek - (International) Apple fixes WebKit vulnerabilities with 
release of Safari 8.0.4. Apple released Safari versions 8.0.4, 7.1.4, and 6.2.4 which 
address a total of 16 memory corruption issues that were identified in WebKit, by 
Apple’s own security team and Google Chrome Security Team, and included a user 
interface inconsistency. 

Source: http://www.securitvweek.com/apple-fixes-webkit-vulnerabilities-release-safari- 
804 



28. March 18, Securityweek - (International) Johnson Controls, XZERES, Honeywell 
patch vulnerable products. The Industrial Control Systems Cyber Emergency 
Response Team (ICS-CERT) announced that Johnson Controls, Honeywell, and 
XZERES released patches addressing vulnerabilities in their products which can be 
exploited by an attacker to gain administrative access and compromise affected systems 
through a cross-site request forgery (CSRF) flaw, an unrestricted file upload 
vulnerability, or a path traversal vulnerability. 

Source: http://www.securitvweek.com/iohnson-controls-xzeres-honevwell-patch- 
vulnerable-products 

29. March 18, Softpedia - (International) Almost 2,000 popular Android and iOS apps 
are vulnerable to FREAK attack. FireEye researchers discovered that 1,999 popular 
Android and Apple iOS apps used for photo and video, financial, lifestyle, social 
networking, communication, or shopping are susceptible to the Factoring RSA-Export 
Key (FREAK) attack which weakens encryption due to a vulnerable build of OpenSSL 
cryptographic library. The apps all contain sensitive information including data related 
to online banking, account log-in credentials, or medical information. 

Source: http://news.softpedia.com/news/Almost-2-000-Popular-Android-and-iOS- 
Apps- Are- V ulnerable-to-FREAK- Attack-47 6101. shtml 

30. March 17, Softpedia - (International) Windows Live SSL certificate issued to 
unauthorized third party. Microsoft released an advisory warning of a fraudulent 
certificate for the Finnish Windows Five domain which is generated by the Certificate 
Authority (CA) Comodo following an unauthorized request from a privileged email 
account which can be used by hackers to spoof Microsoft Web content and carry out 
man-in-the-middle (MitM) and phishing attacks. The certificate affects systems running 
certain Windows and Server versions, as well as Windows Phone 8 and Windows 
Phone 8.1. A standalone updater is available for revoked certificate. 

Source: http://news.softpedia.com/news/Windows-Five-SSF-Certificate-Issued-to- 
Unauthorized-Third-Party-476020.shtml 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

See item 29 
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Commercial Facilities Sector 

31. March 18, Contra Costa Times - (California) Pittsburgh: Cause of big rig’s fiery 
crash could take weeks to determine. Authorities continued to investigate the cause 
of an accident that kept every business in a Pittsburg, California strip mall closed 
March 17 after a semi-truck hit at least three cars before crashing into a vacant Los 
Patrones Mexican Food restaurant and exploding March 16, killing the driver. 

Source: http://www.contracostatimes.com/breaking-news/ci 27728427/pittsburg-cause- 
big-rigs-fiery-crash-could-take 

32. March 18, WXIN 59 Indianapolis - (Indiana) Up to 30 displaced after two-alarm 
grease fire at Autumn Woods Apartments in Castleton. A March 17 fire at the 
Autumn Woods Apartments complex in Castleton displaced 30 residents and caused an 
estimated $750,000 in damage. Firefighters rescued 2 individuals from the structure 
that is believed to have caught fire due to a grease fire. 

Source: http://fox59.com/2015/03/17/two-alarm-fire-reported-at-autumn-woods- 
apartments-in-castleton/ 

33. March 17, Softpedia - (National) Apple American Group loses USB drive, employee 
SSNs exposed. Apple American Group reported that a third-party payroll consultant 
inadvertently lost a removable storage drive containing sensitive information, including 
names, Social Security numbers, and tax information of employees from about 470 
Applebee’s restaurants nationwide. A company representative stated that there is no 
evidence that the data has been used for malicious purposes. 

Source: http://news.softpedia.com/news/Apple-American-Group-Loses-USB-Drive- 
Emplovee-SSNs-Exposed-476051.shtml 
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Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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